nix-super/src/libstore/sandbox-minimal.sb

6 lines
143 B
Text
Raw Normal View History

(allow default)
; Disallow creating setuid/setgid binaries, since that
; would allow breaking build user isolation.
(deny file-write-setugid)